Once Windows Defender is disabled, create a folder C:\\EvilStuff

Click into EvilStuff and choose View —> Show —> File Name Extensions

In any web browser, go to the PowerSploit github repository here.

Click on ‘PowerView.ps1’

Click on Raw

Use Ctrl-A to select all and CTRL-C to copy.

Create a new text file in C:\\EvilStuff called PowerView.ps1
- Right-click and ‘Edit in Notepad’

Paste the script in and save.
- If Paste doesn’t work, update your VMWare tools.
- Not sure how? Ask!
- Note: If you install VMWare tools and restart, be sure to check that Windows Defender is still disabled once you turn the Windows 11 VM on and off again.
- Windows Defender will come back after reboot and you’ll need to disable it.
